VULNERABILITY INTELLIGENCE

CVE-2019-19090

CVSS score3.5 LOW
EPSS probability0.52%
CISA KEVNot currently listed
Published2020-04-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Description

For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections might access the cookie information, thus making it susceptible to eavesdropping.

Weakness classification

  • cybersecurity@ch.abb.com: CWE-16
  • nvd@nist.gov: CWE-311

Primary references